Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/60937ba8-97a0-39b2-9125-b389bb3810bd.roa
File:                     60937ba8-97a0-39b2-9125-b389bb3810bd.roa (raw, json)
Hash identifier:          QxqG1s9aX1lQ+Ln/zc/ruppu6ZhGF/VIDkWQkcNHLGs=
Subject key identifier:   A2:F8:01:CF:C7:CE:C9:FD:AB:5A:C6:62:67:A2:D2:5A:24:98:55:11
Certificate issuer:       /CN=295adc45-532e-4e55-96b9-3f50cdecbbaa
Certificate serial:       010D0C9F432858478721225211C7F2808BEBA3C0
Authority key identifier: 27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/60937ba8-97a0-39b2-9125-b389bb3810bd.roa
Signing time:             Sun 13 Oct 2024 13:00:42 +0000
ROA not before:           Sun 13 Oct 2024 13:00:42 +0000
ROA not after:            Sat 11 Jan 2025 14:00:42 +0000
asID:                     23154
IP address blocks:        148.164.6.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:87:21:22:52:11:c7:f2:80:8b:eb:a3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=295adc45-532e-4e55-96b9-3f50cdecbbaa
        Validity
            Not Before: Oct 13 13:00:42 2024 GMT
            Not After : Jan 11 14:00:42 2025 GMT
        Subject: CN=5f2054e3-d540-4531-b3e2-f8779e1e9a1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:61:03:c4:cc:61:e4:09:2a:d1:9a:98:52:57:
                    55:fc:54:fd:50:3a:6c:05:f9:08:ff:04:42:9b:b4:
                    43:95:25:34:f9:e0:50:8c:60:9c:e8:4d:e5:89:6d:
                    27:35:97:cc:73:4b:2b:b1:5a:bb:9e:ac:36:cc:17:
                    46:bb:d4:c2:8c:00:02:ac:05:23:7a:17:89:c1:03:
                    24:3a:42:57:2e:7e:82:b5:e1:39:46:3e:95:29:6b:
                    9e:d2:46:c6:f0:e1:9d:3a:ae:82:b3:a6:7c:f1:9f:
                    88:aa:84:f5:89:b8:0b:74:d9:87:89:88:c9:32:03:
                    ff:45:7b:b3:02:bf:b4:36:1b:df:33:f0:e8:10:18:
                    03:6a:e7:e2:0d:18:69:6c:e3:22:08:af:17:78:92:
                    fc:e8:11:7f:52:f0:ca:b8:93:f1:a3:22:9d:43:92:
                    66:8f:61:81:e5:81:f9:1e:7d:30:8b:d3:6d:94:78:
                    4a:21:3f:83:54:c1:2a:e3:8d:0a:60:b8:5d:d4:70:
                    d8:6a:4d:83:f1:2d:5e:47:a2:50:d6:05:23:29:da:
                    85:80:80:7d:90:c3:2c:1c:fb:c4:97:ae:05:c4:39:
                    e3:6d:8c:fb:78:f5:1a:b8:94:79:c8:27:a3:1f:c8:
                    fe:21:79:b8:56:60:1a:90:3b:04:89:11:ac:9c:c4:
                    9e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:F8:01:CF:C7:CE:C9:FD:AB:5A:C6:62:67:A2:D2:5A:24:98:55:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/60937ba8-97a0-39b2-9125-b389bb3810bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl

            X509v3 Authority Key Identifier:
                keyid:27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.164.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:05:8a:46:9b:d2:cf:90:7d:b6:3b:b3:6d:05:a5:4a:91:ad:
         8d:70:c6:65:18:35:c1:3b:de:4a:32:aa:b0:1a:86:e3:08:b7:
         4b:db:1e:42:f1:47:f3:52:43:75:73:bc:7d:c7:c5:57:8f:00:
         38:82:89:9f:7a:4d:37:04:87:e3:f7:32:ed:40:79:c0:6f:d0:
         95:40:f9:bd:23:f5:b2:f1:e2:be:4d:e7:18:78:9f:c4:fb:38:
         44:9b:0e:5c:1d:7c:cf:d3:3b:d5:75:a3:40:ce:e0:24:75:a3:
         df:e4:27:2f:86:0b:60:34:c5:20:0e:2e:7c:c1:44:a8:fa:2a:
         a1:2d:f0:70:b6:26:d0:cc:e7:0e:33:d8:a1:f0:cc:ee:cd:90:
         4d:b5:0c:58:45:49:bb:dd:4f:02:08:1c:b5:f1:f3:7d:c4:bf:
         e8:cf:48:d7:57:6c:8d:22:73:c9:51:8d:f7:6e:fb:45:f0:d6:
         41:3f:bc:15:38:c5:af:6e:dc:77:da:d6:2b:57:ce:ba:5d:91:
         e2:a2:79:ae:e2:21:85:bd:eb:9a:3a:61:99:c7:da:80:70:d2:
         6f:79:f3:ad:e7:b7:5c:9e:eb:7f:eb:a3:26:be:91:5d:85:a4:
         02:cc:75:dc:6f:4d:65:86:63:08:01:6d:0b:a5:cc:b3:59:01:
         b9:5a:bf:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:01 2024 by rpki-client on console-fra.rpki-client.org